Access Control In Cloud Environment Research Articles

Privacy-Preserving Spatial Keyword Search With Lightweight Access Control in Cloud Environments

Privacy-Preserving Spatial Keyword Search With Lightweight Access Control in Cloud Environments

REVIEW OF EVOLVING CLOUD COMPUTING PARADIGMS: SECURITY, EFFICIENCY, AND INNOVATIONS

The paper provides a comprehensive analysis of the dynamic landscape of cloud computing, with a focus on security, efficiency, and innovative trends. It delves into the evolving paradigms that shape the current state of cloud computing, offering insights into the challenges and opportunities that arise as the technology continues to advance. Security is a central theme in the review, addressing the critical concerns associated with data privacy, integrity, and access control in cloud environments. The study explores the latest security measures and protocols implemented to safeguard sensitive information, emphasizing the importance of robust security frameworks in an era marked by cyber threats and vulnerabilities. Efficiency is another key aspect under scrutiny, with the review evaluating performance optimization strategies, resource allocation mechanisms, and scalability solutions. The authors examine how cloud providers are adapting to meet the growing demand for efficient and sustainable computing resources, highlighting best practices and emerging trends that contribute to enhanced performance. Furthermore, the review sheds light on the innovative trends shaping the future of cloud computing. It explores cutting-edge technologies, such as edge computing, serverless architectures, and containerization, and their impact on reshaping the cloud landscape. The paper concludes by summarizing the key takeaways and emphasizing the importance of understanding and adapting to the evolving paradigms in cloud computing to ensure a secure, efficient, and innovative digital future.
 Keywords: Cloud Computing, Information Technology, Computing, Security, Innovations, Review.

Efficiently Encryption Decryption schema for Secure File Storage System in Cloud Computing

Cloud computing finds applications in different industries, providing various services and data storage capabilities. While data stored in the cloud can be retrieved based on user requests, data security remains a primary concern. To address these security concerns, a proposed system employs the combined strength of the Triple Data Encryption Standard (AES) and Blowfish algorithms. The lack of robust and efficient secure file storage systems in cloud computing poses significant risks to data confidentiality and integrity.Existing solutions often lack strong encryption mechanisms and reliable server-side encryption and decryption capabilities. This research aims to develop a secure file storage system that leverages server encryption and decryption techniques to ensure data confidentiality, integrity, and access control in cloud environments. The objective is to design a system that effectively protects sensitive files during storage, transmission, and processing, while maintaining efficient data access and retrieval for authorized users. Key Words: Server-Side Encryption, Secure Key Storage Decryption, Encryption, Secure File Storage, Blowfish

Secure Boolean Spatial Keyword Query With Lightweight Access Control in Cloud Environments

Spatial keyword query has attracted wide-spread academic and industrial concerns due to the popularity of location-based services and Internet of Things. To efficiently support the online query processing, the data owners need to outsource their data to cloud platforms. However, the outsourcing services may raise privacy leaking issues. Moreover, access control, another important security concern, is largely ignored. Therefore, we first propose and formalize the problem of secure boolean spatial keyword query under lightweight access control while guaranteeing the widely accepted <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">adaptive indistinguishability against chosen keyword attack</i> model. Then, we devise a novel hybrid Bloom filter encoding strategy, including a linear embedding and exponent-based transformation schemes and a secure index structure, called <monospace xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">SAGTree</monospace> . They can maintain both geo-text and access policy information together in a secure way while answering the encrypted queries under access control without decryption. Finally, we present the in-depth security analysis and demonstrate the performance of our proposed algorithms.

Secure Data Sharing with Confidentiality, Integrity and Access Control in Cloud Environment

Cloud storage is an incipient technology in today’s world. Lack of security in cloud environment is one of the primary challenges faced these days. This scenario poses new security issues and it forms the crux of the current work. The current study proposes Secure Interactional Proof System (SIPS) to address this challenge. This methodology has a few key essential components listed herewith to strengthen the security such as authentication, confidentiality, access control, integrity and the group of components such as AVK Scheme (Access List, Verifier and Key Generator). It is challenging for every user to prove their identity to the verifier who maintains the access list. Verification is conducted by following Gulliou-Quisquater protocol which determines the security level of the user in multi-step authentication process. Here, RSA algorithm performs the key generation process while the proposed methodology provides data integrity as well as confidentiality using asymmetric encryption. Various methodological operations such as time consumption have been used as performance evaluators in the proposed SIPS protocol. The proposed solution provides a secure system for firm data sharing in cloud environment with confidentiality, authentication and access control. Stochastic Timed Petri (STPN) Net evaluation tool was used to verify and prove the formal analysis of SIPS methodology. This evidence established the effectiveness of the proposed methodology in secure data sharing in cloud environment.

BFR-SE: A Blockchain-Based Fair and Reliable Searchable Encryption Scheme for IoT with Fine-Grained Access Control in Cloud Environment

Due to capacity limitations, large amounts of data generated by IoT devices are often stored on cloud servers. These data are usually encrypted to prevent the disclosure, which significantly affects the availability of this data. Searchable encryption (SE) allows a party to store his data created by his IoT devices or mobile in encryption on the cloud server to protect his privacy while retaining his ability to search for data. However, the general SE techniques are all pay-then-use. The searchable encryption service providers (SESP) are considered curious but honest, making it unfair and unreliable. To address these problems, we combined ciphertext-policy attribute-based encryption, Bloom filter, and blockchain to propose a blockchain-based fair and reliable searchable encryption scheme (BFR-SE) in this paper. In BFR-SE, we constructed an attribute-based searchable encryption model that can provide fine-grained access control. The data owner stores the indices on SESP and stores some additional auxiliary information on the blockchain. After a data user initiates a request, SESP must return the correct and integral search results before the deadline. Otherwise, the data user can send an arbitration request, and the blockchain will make a ruling. The blockchain will only perform arbitrations based on auxiliary information when disputes arise, saving the computing resources on-chain. We analyzed the security and privacy of BFR-SE and simulated our scheme on the EOS blockchain, which proves that BFR-SE is feasible. Meanwhile, we provided a thorough analysis of storage and computing overhead, proving that BFR-SE is practical and has good performance.

An efficient attribute-based authentication scheme with multiple authorities in public cloud

Currently, attribute-based authentication provides a feasible solution for fine-grained access control in cloud environment. However, the existing schemes can not solve the following problems at the same time, that is, how to ensure that the computation cost of the client does not depend on the size of underlying access structure, and how to introduce distributed authorities to manage and maintain the attribute universe. To solve the above problems, an efficient multi-authority attribute-based authentication scheme is proposed. The new scheme uses the technique of distributed attribute-based encryption to realize the access control of anonymous users, and reduces users’ computation burden by optimizing the standard implementation zero-knowledge proof and outsourcing users’ computing tasks in the authentication stage. Under the new definition of security, it can be proved that the new scheme is secure and satisfies many attractive properties, such as introducing distributed authorities, supporting outsourcing computation, satisfying attribute anonymity.

On Multipliers of Lattice Implication Algebras for Hierarchical Convergence Models

Role-based access or attribute-based access control in cloud environment or big data environment need requires a suitable mathematical structure to represent a hierarchical model. This paper define the notion of multipliers and simple multipliers of lattice implication algebras that can implement a hierarchical model of role-based or attribute-based access control, and prove every multiplier is simple multiplier. Also we research the relationship between multipliers and homomorphisms of a lattice implication algebra L, and prove that the lattice [0,u] is isomorphic to a lattice [u',1] for each u∈L and u∨u'=1. that is isomorphic to [u,1]X[u',1]as lattice implication algebras for each u∈L satisfying u∨u'=1 .

Achieving security-by-design through ontology-driven attribute-based access control in cloud environments

The constantly increasing number of cyberattacks worldwide raise significant security concerns that generally deter small, medium and large enterprises from adopting the cloud paradigm and benefitting from the numerous advantages that it offers. One way to alleviate these concerns is to devise suitable policies that infuse adequate access controls into cloud services. However, the dynamicity inherent in cloud environments, coupled with the heterogeneous nature of cloud services, hinders the formulation of effective and interoperable access control policies that are suitable for the underlying domain of application. To this end, this work proposes an approach to the semantic representation of access control policies and, in particular, to the semantic representation of the context expressions incorporated in such policies. More specifically, the proposed approach enables stakeholders to accurately define the structure of their policies, in terms of relevant knowledge artefacts, and thus infuse into these policies their particular security and business requirements. This clearly leads to more effective policies, whilst it enables semantic reasoning about the abidance of policies by the prescribed structure. In order to alleviate the scalability concerns associated with semantic reasoning, the proposed approach introduces a reference implementation that extends XACML 3.0 with an expert system fused with reasoning capabilities through the incorporation of suitable meta-rules.

An Efficient Tate Pairing Algorithm for a Decentralized Key-Policy Attribute Based Encryption Scheme in Cloud Environments

Attribute-based encryption (ABE) is used for achieving data confidentiality and access control in cloud environments. Most often ABE schemes are constructed using bilinear pairing which has a higher computational complexity, making algorithms inefficient to some extent. The motivation of this paper is on achieving user privacy during the interaction with attribute authorities by improving the efficiency of ABE schemes in terms of computational complexity. As a result the aim of this paper is two-fold; firstly, to propose an efficient Tate pairing algorithm based on multi-base number representation system using point halving (TP-MBNR-PH) with bases 1/2, 3, and 5 to reduce the cost of bilinear pairing operations and, secondly, the TP-MBNR-PH algorithm is applied in decentralized KP-ABE to compare its computational costs for encryption and decryption with existing schemes.

Security strategies for cloud identity management - a study

Emphasis on security for providing Access Control in Cloud computing environment plays a significant role. Cloud computing provides number of benefits such as resource sharing, low speculation and large storage space. Huge amount of information stored in cloud can be accessed from anywhere, anytime on pay-per use basis. Resources in cloud should be accessed only by the authorized clients. Access Control in cloud computing has become a critical issue due to increasing number of users experiencing dynamic changes. Authentication, authorization and approval of the access ensuring liability of entities from login credentials including passwords and biometric scan is essential. Also, the federated authentication management is secured. Current approaches require large-scale distributed access control in cloud environment. Data security and access control are the drawbacks in existing access control schemes. Due to the drawbacks in existing access control schemes such as privacy of information when susceptible information is stored in intermediary service provider a federated identity access management is essential. Access control applications majorly concentrate on Healthcare, Government Organizations, Commercial, Critical Infrastructure and Financial Institutions. This review illustrates a detailed study of access control models in cloud computing and various cloud identity management schemes.

Efficient and Secure Interoperable Healthcare Information System Using Keyword Searchable and Role-Based Access Control in Cloud Environment

Efficient and Secure Interoperable Healthcare Information System Using Keyword Searchable and Role-Based Access Control in Cloud Environment

Time domain attribute based encryption for big data access control in cloud environment

Time domain attribute based encryption for big data access control in cloud environment

Enhancing Data Security and Access Control in Cloud Environment using Modified Attribute Based Encryption Mechanism

Social networking and growing popularity of cloud services have made everyone to communicate each other in an easiest way. File sharing and distribution are the frequently used services provided by cloud service providers, although these facilities reduce cost of data sharing but at the same time data security and access control is the major problem. Many renowned service providers have faced the challenges to secure data and provide better access control, and we know once the data is leaked we cannot recover the data loss. Thus in order to ensure better security we need for focus on the two major problems, and those are access control and encryption policy. Cipher text policy attribute based encryption is the most effective solution for access control in real time scenarios where owner can actually decide the access rights for the end-user, but it comes with key escrow problem. We are proposing our modified escrow-free key issuing protocol to solve the problem of key escrow and our Modified Attribute Based Encryption scheme to achieve all security requirements to get a robust and secure system. Further we evaluate our model on the basis of results and lastly we conclude the paper.

A Survey on Attribute-based Encryption Schemes of Access Control in Cloud Environments

In Attribute-based Encryption (ABE) scheme, attributes play a very important role. Attributes have been exploited to generate a public key for encrypting data and have been used as an access policy to control users' access. The access policy can be categorized as either key-policy or ciphertext-policy. The key-policy is the access structure on the user's private key, and the ciphertext-policy is the access structure on the ciphertext. And the access structure can also be categorized as either monotonic or non-monotonic one. Using ABE schemes can have the advantages: (1) to reduce the communication overhead of the Internet, and (2) to provide a fine-grained access control. In this paper, we survey a basic attribute-based encryption scheme, two various access policy attribute-based encryption schemes, and two various access structures, which are analyzed for cloud environments. Finally, we list the comparisons of these schemes by some criteria for cloud environments.